CWE-126— Buffer Over-read

Information disclosure while running video usecase having rogue firmware.

information disclosure while invoking calibration data from user space to update firmware size.

Information disclosure while opening a fastrpc session when domain is not sanitized.

Information disclosure while processing IO control commands.

Information disclosure during audio playback.

Information disclosure while processing information on firmware image during core initialization.

information disclosure while invoking the mailbox read API.

Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver.

Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC message received from the firmware.

Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size.

Information disclosure in Audio while accessing AVCS services from ADSP payload.

Information disclosure in WLAN HAL while handling command through WMI interfaces.

Information disclosure in WLAN HAL when reception status handler is called.

Information disclosure in WLAN HAL while handling the WMI state info command.

Information disclosure in IOE Firmware while handling WMI command.

Information Disclosure in Qualcomm IPC while reading values from shared memory in VM.

Information Disclosure in WLAN Host when processing WMI event command.

Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan.

Buffer over-read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.

An issue in SQLite before Fossil check-in 869a51ae84df allows a local attacker to obtain sensitive information via the Session Extension changeset concat/changegroup merge path

Information Disclosure while processing IOCTL handler callbacks without verifying buffer size.

Buffer over-read in PostgreSQL GB18030 encoding validation allows a database input provider to achieve temporary denial of service on platforms where a 1-byte over-read can elicit process termination. This affects the database server and …

A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted network packet can lead to an out-of-bounds read. An attacker can send a malicious packet to t…

A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted network packet can lead to an out-of-bounds read. An attacker can send a malicious packet to t…

Buffer Over-read vulnerability in Mitsubishi Electric MC Works64 versions 4.00A to 4.04E, Mitsubishi Electric GENESIS64 versions 10.97 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97 and prior, Mitsubishi …

Buffer Over-read in GitHub repository gpac/gpac prior to 2.3-DEV.

Buffer Over-read vulnerability in ABB AC500 V2.This issue affects AC500 V2: through 2.5.2.

Buffer over-read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.

Buffer over-read in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network.

ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or crafted capture file

An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemux_parse_uuid function may read past the end of a heap-allocated buffer, allowing an attacker to disclose heap memory …

Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.

Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally.

Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally.

Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.

Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.

Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.

Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally.

Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.

Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.

Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.

Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally.

Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.

MBIM protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

Toshiba file parser crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.